Improper Validation of Specified Quantity in Input vulnerability in OpenText OpenText Application Automation Tools allows Exploiting Incorrectly Configured Access Control Security Levels.
Multiple missing permission checks - ALM job config has been discovered in OpenText Application Automation Tools. The vulnerability could allow users with Overall/Read permission to enumerate ALM server names, usernames and client IDs configured to be used with ALM servers.
This issue affects OpenText Application Automation Tools: 24.1.0 and below.
References
Link | Resource |
---|---|
https://portal.microfocus.com/s/article/KM000033543?language=en_US | Vendor Advisory |
Configurations
History
21 Oct 2024, 16:15
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:microfocus:application_automation_tools:*:*:*:*:*:jenkins:*:* | |
References | () https://portal.microfocus.com/s/article/KM000033543?language=en_US - Vendor Advisory | |
First Time |
Microfocus application Automation Tools
Microfocus |
|
CWE | NVD-CWE-noinfo | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 2.4 |
18 Oct 2024, 12:53
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
16 Oct 2024, 17:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-10-16 17:15
Updated : 2024-10-21 16:15
NVD link : CVE-2024-4211
Mitre link : CVE-2024-4211
CVE.ORG link : CVE-2024-4211
JSON object : View
Products Affected
microfocus
- application_automation_tools
CWE